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We investigate the construction of quantum low-density parity-check (LDPC) codes from classical 
quasi-cyclic (QC) LDPC codes with girth greater than or equal to 6. We have shown that the 
classical codes in the generalized Calderbank-Shor-Steane (CSS) construction do not need to satisfy 
the dual-containing property as long as pre-shared entanglement is available to both sender and 
receiver. We can use this to avoid the many 4-cycles which typically arise in dual-containing LDPC 
codes. The advantage of such quantum codes comes from the use of efficient decoding algorithms 
such as sum-product algorithm (SPA). It is well known that in the SPA, cycles of length 4 make 
successive decoding iterations highly correlated and hence limit the decoding performance. We show 
the principle of constructing quantum QC-LDPC codes which require only small amounts of initial 
shared entanglement. 
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I. INTRODUCTION 

Low-density parity-check (LDPC) codes were first pro- 
posed by Gallager [Ij] in the early 1960s, and were redis- 
covered 0, H, 0] in the 90s. It has been shown that these 
codes can achieve a remarkable performance that is very 
close to the Shannon limit. Sometimes, they perform 
even better Q than their main competitors, the Turbo 
codes. These two families of codes are called modern 
codes. 

A (J, L)-regular LDPC code is defined to be the null 
space of a binary parity check matrix H with the follow- 
ing properties: (1) each column consists of J "ones" (each 
column has weight J); (2) each row consists of L "ones" 
(each row has weight L); (3) both J and L are small 
compared to the length of the code n and the number of 
rows in H. Several methods of constructing good fami- 
lies of regular LDPC codes have been proposed 0, H, 
However, probably the easiest method is based on cir- 
culant permutation matrices Q, which was inspired by 
Gallager's original LDPC construction. 

We define a cycle of a linear code to be of length 2s if 
there is an ordered list of 2 s matrix elements of H such 
that: (1) all 2s elements are equal to 1; (2) successive 
elements in the list are obtained by alternately changing 
the row or column only (i.e., two consecutive elements 
will have either the same row and different columns, or 
the same column and different rows); (3) the positions of 
all the 2s matrix elements are distinct, except the first 
and last ones. We call the cycle of the shortest length 
the girth of the code. 

There are various methods for decoding classical 
LDPC codes @. Among them, sum-product algorithm 
(SPA) decoding f§\ provides the best trade-off between 
error-correction performance and decoding complexity. 
It has been shown that the performance of SPA decoding 
very much depends on the cycles of shortest length Q — 



in particular, cycles of length 4. These shortest cycles 
make successive decoding iterations highly correlated, 
and severely limit the decoding performance. Therefore, 
to use SPA decoding, it is important to design codes with- 
out short cycles, especially cycles of length 4. 

Because classical LDPC codes have such good perfor- 
mance — approaching the channel capacity in the limit 
of large block size — there has been considerable inter- 
est in finding quantum versions of these codes. However, 
quantum low-density parity-check codes d, [13, El, [III 
are far less studied than their classical counterparts. The 
main obstacle comes from the dual- containing constraint 
of the classical codes that are used to construct the cor- 
responding quantum codes. While this constraint was 
not too difficult to satisfy for relatively small codes, it is 
a substantial barrier to the use of highly efficient LDPC 
codes. The second obstacle comes from the bad per- 
formance of the iterative decoding algorithm. Though 
the SPA decoding can be directly used to decode the 
quantum errors, its performance is severely limited by 
the many 4-cycles, which are usually the by-product of 
the dual-containing property, in the standard quantum 
LDPC codes [10.]. 

In this paper we will show that, by using the 
entanglement-assisted formalism [l^ [ij], these two ob- 
stacles of standard quantum LDPC codes can be over- 
come. By allowing the use of pre-shared entanglement 
between senders and receivers, the dual-containing con- 
straint can be removed. Constructing quantum LDPC 
codes from classical LDPC codes becomes transparent. 
That is, arbitrary classical binary or quaternary codes 
can be used to construct quantum codes via the CSS 
or generalized CSS constructions p^ . Moreover, we 
can easily construct quantum LDPC codes from classical 
LDPC codes with girth at least 6. We make use of clas- 
sical quasi-cyclic LDPC codes in our construction, and 
show that the resulting entanglement-assisted quantum 
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LDPC codes have good performance; we compare them 
to examples of standard LDPC codes aheady proposed 
in the hterature with similar net rates, and show that the 
new quasicyclic codes have lower block-error rates. 

This paper is organized as follows. We discuss proper- 
ties of binary circulant matrices, and give a brief intro- 
duction to classical QC-LDPC codes in section HH We 
also prove a few interesting lemmas regarding classical 
QC-LDPC codes in this section. In section Hill we discuss 
the principle of constructing quantum QC-LDPC codes 
from classical QC-LDPC codes, such that the resulting 
quantum QC-LDPC codes require only a small amount 
of initial pre-shared entanglement. We also provide two 
examples of such constructions. In section Hvl wc com- 
pare the performance of the quantum QC-LDPC codes 
illustrated in section IIIII with some previously proposed 
quantum LDPC codes. Finally, in section|V]we conclude. 

II. PRELIMINARY 

A. Properties of binary circulant matrices 

We begin with a well-known proposition for binary cir- 
culant matrices. 

Proposition II. 1 The set of binary circulant matrices 
of size r X r forms a ring isomorphic to the ring of poly- 
nomials of degree less than r: ¥2[X]/ {X^ ^ !)• 

Let M be an r X r circulant matrix over F2. We 
can uniquely associate with M a polynomial M(X) with 
coefficients given by entries of the first row of M. If 
c = (co, ci, • ■ • , Cr-i) is the first row of the circulant ma- 
trix M, then 

M{X) = Co + CiX + C2X^ + ■■■ + Cr-iX'-\ (1) 

Adding or multiplying two circulant matrices is equiva- 
lent to adding or multiplying their associated polynomi- 
als modulo X^ — 1. We now give some useful properties 
of these matrices and polynomials. 

The first lemma is a well-known result in the theory of 
cyclic codes (l5l |. 

Lemma II. 2 Let M{X) be the polynomial associated 
with the r X r binary circulant matrix M . If 
gcd{M{X),X'' - 1) = K{X), and the degree of K(X) 
is k, then the rank of M is r — k. 

In the following, we will discuss some particular cases 
of the circulant matrix M that will play important roles 
in the later section. 

Theorem II. 3 Let r = pq, where p,q > 1. Let c = 
(co,Ci,--- ,Cr-i) be the first row of an r x r circulant 
matrix M . 

1- If C(fe+pj)i„odr = 1, for some k and i = 
0, 1, • ■ • , ((? — 1), and otherwise, then rank(M) = 



2. If C(fe+i) modr = 1, for some k and i = 0, 1 • ■ • ,{p- 
1), and otherwise, then rank{M) = r — p + 1. 

Proof 

1. If C(fe+pi) modr = 1, for some k and i = 0, 1, ■ • • , {q- 
1), and otherwise, we have 

M{X) = X'' (^1 + XP + X^P + --- + ) 
\XP - 1 J 

Since gcd{X'',XP — 1) = 1, the following holds 
K{X)^gcdiM{X),{X^ 

Then the degree of K{X) is pq — p — r ~ p. There- 
fore, by lemma [TL2l the rank of M is p. 

2. In this case, the polynomial is 
M{X) = X'' (^1 + X + X^ + ■■■ + X^P-^^^ 

^ ( K_zl ^ 

\{X - 1)(1 + XP + X'^P + ■■■+ X(i-i)p) J 

and 

K{X) = 1+X + X^ + ---+ X'^P-^\ 

Then the degree oi K{X) is p — I. Therefore, by 
lemma 111.21 the rank of Af is r — p + 1 . 

□ 

We also have the following corollary. 

Corollary II. 4 Suppose r — pq, and p,q > 1. If the 

weight of each row is p, and K{X) ^ 1, then the rank k 
of matrix M is upper-bounded by r ~ p -\- 1. 

Proof Since the weight of c is p, the lowest possible 
degree of M{X) that divides X"^ ~ 1 is p — 1, wherein 

M{X) = l + X + X'^ + --- + X'^P-^\ (2) 

Then item 2 of theorem III.3I confirms the rank k is at 
most r — p-\-l. □ 

B. Classical quasi-cyclic LDPC codes 

Definition II. 5 A binary linear code C{II) of length 
n = r ■ L is called quasi-cyclic (QC) with period L if 
any codeword which is cyclically right-shifted by L posi- 
tions is again a codeword. Such a code can be represented 
by a parity-check matrix H consisting of r x r blocks (by 
properly rearranging the coordinates of the code ), each of 
which is an (in general different) r x r circulant matrix. 
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By the isomorphism mentioned in Prop. III. 11 we can 
associate with each quasi-cychc parity-check matrix H £ 
jpjrxLr J X ^ polynomial parity-check matrix H(X) = 
where hjj{X) is the polynomial, as de- 
fined in IJ]), representing the r x r circulant submatrix of 
H, and the notation [J] := {1, 2, • • • , J}. 

Generally, there are two ways of constructing; (J, L)- 
regular QC-LDPC by using circulant matrices [16|: 

Definition II. 6 We say that a QC-LDPC code is Type-I 
if it is given by a polynomial parity-check matrix H(X) 
such that all entries are non-zero monomials. We say 
that a QC-LDPC code is Type-II if it is given by a poly- 
nomial parity- check matrix H(X) with either binomials, 
monomials, or zero. 



1. Type-I QC-LDPC 

To give an example, let r = 16, J = 3, and L 
following polynomial parity check matrix 



H(X) = 



xxxxxxxx 
^1 x^ x^ x^ x^ x^ 

X^ X^ X^ X^ X6 x^ x» x^ 



The 



(3) 



gives a Type-I (3, 8)-regular QC-LDPC code of length 
n — 16 ■ 8 — 128. Later on, we will also express H(X) 
by its exponent matrix He- For example, the exponent 
matrix of ([3]) is 



He = 



11111111 
25352535 
23456789 



(4) 



The difference of two arbitrary rows of the exponent ma- 
trix He is defined as 



{{ciM - Cj,fc)mod r). 



ke[L] 



(5) 



where is the i-th row of He and r is the size of the 
circulant matrix. We then have 

d2i = (1,4,2,4,1,4,2,4) 
dgi = (1,2,3,4,5,6,7,8) 
d32 = (0,14,1,0,4,2,5,4). 

We call an integer sequence d — (do, rfi, • • • , dL-i) mul- 
tiplicity even if each entry appears an even number of 
times. For example, d2i is multiplicity even, but d32 is 
not, since only and 4 appear an even number of times. 
We call d multiplicity free if no entry is repeated; for 
example, d^i. 

A simple necessary condition for Type-I (J, L)-regular 
QC-LDPC codes to give girth .g > 6 is given in ^. How- 
ever, a stronger result (both sufficient and necessary con- 
dition) is shown in Q . We state these theorems from fo] 
without proofs. 



Theorem II.7 A Type-I QC-LDPC code C (He) is dual- 
containing if and only if Ci — Cj is multiplicity even for all 
i and j , where Ci is the i-th row of the exponent matrix 
He. 

Theorem II. 8 There is no dual- containing Type-I QC- 
LDPC having girth g > 6. 

Theorem II. 9 A necessary and sufficient condition for 
a Type-I QC-LDPC code C{He) to have girth g > 6 is 
Ci — Cj to be multiplicity free for all i and j . 



2. Type-II QC-LDPC 

Take r = 16, J = 3, and L — 4. The following is an 
example of a Type-II (3,4)-regular QC-LDPC code: 



X + X"^ X^ + Xi" 

^5 ^6 ^11 ^12 

X^ + X^ x'^-^x^^ 



H(X) = 
The exponent matrix of 



IS 



Hf 



(1,4) oo (7,10) oo 
5 6 11 12 
oo (2,9) oo (7,13) 



(6) 



(7) 



Here we denote X°° — 0. 

The difference of two arbitrary rows of He is defined 
similarly to ^ with the following additional rules: (i) if 
for some entry Ci^k is oo, then the difference of Ci^k and 
any other arbitrary term is again oo; (ii) if the entries 
Ci^k and Cj,k are both binomial, then the difference of Ci^k 
and Cj^k contains four terms. In this example, we have 

d2i = ((4,l),oo,(4,l),oo) 
dsi — (oo, oo, oo, oo) 

d32 = (^,(12,3),«),(11,1)) 

dii = ((0, 3, 13, 0), 00,(0, 3, 13,0), oo) 
d22 = (0,0,0,0) 

d33 = («),(0,9,7,0),«),(0,10,6,0)). 

The definition of multipUcity even and multiplicity 
free is the same, except that we do not take oo into 
account. For example, d32 is multiplicity free, since there 
is no pair with the same entry except oo. Unlike Type-I 
QC-LDPC codes, whose dii is always the zero vector, dii 
of Type-II QC-LDPC codes can have non-zero entries. 
Therefore it is possible to have cycles of length 4 in a 
single layer if dii is not multiplicity free. Each layer is a 
set of rows of size r in the original parity check matrix H 
that corresponds to one row of He. For example, dn is 
multiplicity even, therefore the first layer of this Type-II 
regular QC-LDPC parity check matrix contains 4-cycles. 

In the following, we will generalize theorems 111.71111.91 
from the previous section to include the Type-II QC- 
LDPC case. 
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Theorem 11.10 C{He) is a dual- containing Type-II 
regular QC-LDPC code if 
plicity even for all i and j . 



regular QC-LDPC code if and only if — Cj is multi- 



Proof Let H(X) = [^j,i(-''^)]je[J],ie[L] be the polyno- 
mial parity check matrix associated with a Type-II (J, L)- 
regular QC-LDPC parity check matrix H. Denote the 
transpose of H(X) by H(X)^ = [/i[j(-'«^)]/e[L] je[j], and 
we have 



hUX) = 




if /ij,/(X) = 

if = X'= 

if hj,i{X) ^X*^! +X''^ 



(8) 



Let H(X) = B.{X)B.{X)^, and let the (i,j)-th compo- 
nent of H(X) be KjiX). Then 



(9) 



The condition that d.y is multiplicity even implies that 
hij{X) = modulo X^ — 1, and vice versa. □ 

Theorem 11.11 A necessary and sufficient condition for 
a Type-II regular QC-LDPC code C{IIe) to have girth 
g > 6 is that Ci — Cj be multiplicity free for all i and j . 

Proof The condition that — Cj is multiplicity free for 
all i and j guarantees that there is no 4-cycle between 
layer i and layer j, and vice versa. □ 

Theorem 11.12 There is no dual- containing QC-LDPC 
having girth g > 6. 



Proof This proof follows directly from theorem III. 101 
and theoremUnH If the Type-II re gular QC-LDPC code 
is dual-containing, then by theorem lll.lOl Ci — Cj must be 
multiplicity even for all i and j. However, theorem III. Ill 
says that this QC-LDPC must contain cycles of length 4. 
□ 



III. CONSTRUCTION OF QUANTUM QC-LDPC 
CODES FROM CLASSICAL QC-LDPC CODES 

It has been shown that any classical linear binary or 
quaternary code can be used to construct a correspond- 
ing entanglement-assisted quantum error-correcting code 

Theorem III.l Let C{H) he a binary classical [n,k,d\ 
code with parity check matrix H . We can obtain a cor- 
responding [[n,2k — n -\- c, d; c]] EAQECC, where c = 
ia,nk{IIII^) is the number of ebits needed. 

Proof See [13. □ 
Remark An [[n, fc',d;c]] EAQECC encodes k' logic 
qubits into n physical qubits with the help of c ebits (c 



copies of maximally entangled states). We define the net 
rate of such an EAQECC to be . The definition of 
net rate only takes account of the effective qubits that are 
sent through a channel if we trade the stronger resource 
of pure identity qubit channel with the weaker resource 
of pure entanglement. When c = 0, this quantity is equal 
to the "rate" of a standard QECC. Another way to think 
of this is that the net rate is the rate we can achieve 
if we "borrow" c ebits in order to send the codeword, 
then "pay them back" by using c communication qubits 
to establish a new c ebits. Because this catalytic mode 
makes no net consumption of ebits, it is quite reasonable 
to compare the net rate of an EAQECC to the rate of a 
standard QECC. 

In the following, we will consider conditions that will 
give us ( J, L)-regular QC-LDPC codes C{H) with girth 
g >& and with the rank of HH^ as small as possible. Let 
H(X) — H(Ar)H(X)-^ be the polynomial representation 
of HH^ . In general, H(Ar) represents a square symmet- 
ric matrix H with size Jr x Jr that contains circulant 
r X r matrices represented by hij{X) as defined in 
Next, we provide two examples to illustrate two differ- 
ent ways of minimizing the rank of the square symmetric 
matrix represented by H(X). This would minimize the 
number of ebits when we use the classical code C{H) to 
construct the EAQECC. 

The first method is to make the matrix H = HH^ 
become a circulant matrix with a small rank. This can 
be achieved by properly choosing H(Ar) such that the 
elements hi,j{X) in H(A') satisfying: 



^i,j{X) — hi+ij+i{X), 



(10) 



for i, J = 0, 1, ■ • • , J— 2. First notice that each polynomial 
matrix hij (X) in H(X) is a circulant matrix of size r x r, 
and the polynomial matrix H(X) contains such circu- 
lant matrices. Since condition pH]) guarantees H is itself 
circulant, H(A') can be represented by some polynomial 
g{X) in ¥2[X]/{X'''' - 1). The rank k of H can then be 
read off by lemma |IL2 If gcd{g{X), X'^'' - 1) = K{X), 
and the degree of K{X) = k, then k = Jr — k. 

Let's look at an example of this type using a classical 
Type-I QC-LDPC code. Consider r = 16, J = 3, L = 8, 
and the following polynomial parity check matrix H(A"): 



H(X) = 



X X X X X X X X 

X x^ x^ x^ x^ x^ x^ x» 
X x^ x^ X'' x^ a:" x^^ 



Simple calculation shows that 



KAX) 



0, i = j, 



(11) 



(12) 
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Since ([12)) satisfies ([10]), H(X) represents a circulant ma- 
trix, and the polynomial associated with H is 



9{X) 



The degree of gcd(.g(X), - 1) = 30, therefore by 
lemma ITL2| the number of ebits that was needed to con- 
struct the corresponding quantum code is only 18. Ac- 
tually, ([n|) gives us a [[128,58,6; 18]] EAQECC, and we 
will refer to this example as "Exl" later in section IIVI 
The net rate of this code is (fc — c)/n = 40/128. 

Remark The parity check matrix H of ([TT|) gives a 
[128, 84, 6] classical code. The rate of the QC-LDPC code 
is actually slightly higher than (L — J)/L, since H usu- 
ally contains linearly dependent rows. For example, each 
layer of H contains the all-one vector; therefore, we can 
find at least (J — 1) linearly dependent rows in H . 

The second method is to minimize the rank of each 
circulant matrix inside H , that is, to minimize the rank 
of the circulant matrix represented by hij(X), Let 
the rank of H be k. Then 



At < > max K 



2 J ■ 



(13) 



This upper bound is not tight in general, e.g., when L 
is odd in the Type-I (J, L)-regular QC-LDPC codes, the 
bound of (I13p gives Jr, which is equal to the number of 
rows of H. This is because Ki^i = r for every i. However, 
with certain restrictions (e.g. even L), we can obtain a 
reasonable upper bound for k. 



Theorem III. 2 Given a [J , L) -regular QC-LDPC code 
with polynomial parity check matrix ~H.{X) such that the 
exponent matrix of'ii{X) ~ H(Ar)H(A)-^ is multiplicity 
free, if whenever hij{X) ^ 0, gcd{hij{X),X^ — 1) 7^ 1, 
then the rank k is upper bounded by J{r — _L + 1). 



Proof Let hi,j be the circulant matrix associated with 
the polynomial hi,j{X). Since the exponent matrix of 
H(X) is multiplicity free, then the weight of each row vec- 
tor of hi,j is L whenever hij(X) ^ 0. By corollarv lII.4| 



< r — L -|- 1. Therefore 



J 

K < > maxK, 1 

Z— 1 



< J(r-L + 1). 



(14) 



Define the entanglement consumption rate to be k/ti. 
Since the rank decides the number of EPR pairs that 
are required by the corresponding entanglement-assisted 
quantum code, we want njn to be as small as possible. 
It is easy to see that this bound becomes tighter when 
we pick L much larger than J: 



- < 

n 



J{r-L+ 1) Jr J 



< 



n Lr L 

In the following, we present an example showing that 

the restriction in theorem IIII.2I is achievable. This ex- 
ample comes from a classical Type-II QC-LDPC code. 
Consider r = 16, J = 3,L = 8, and the following poly- 
nomial parity check matrix VL[X): 



H(X) = 



X + X"^ X + X^ X + X^ 

x^ x^ x'^ x'^ 

X + X^ X + X^ x^x^ 



X + X^ 

x^ x» 
X + x^ 



(15) 



Simple calculation shows that 



0, 

El 



vl-\-2k 
1 1 



(z,j) = (2,2),(l,3),or(3,l) 
(^,J)-(l,l),(3,3) 
(*,j) = (2,l),(2,3) 

(16) 

In this example, (|16p satisfies the statement given in theo- 
rem lIII.2l Therefore, the rank of H(A") is upper bounded 
by 27. The polynomial parity check matrix in (|15p gives 
a [[128, 58, 6; 18]] quantum QC-LDPC code, and we will 
refer to this example as "Ex2" in section HVl It also has 
net rate {k -c)/n = 40/128, just like Exl. 

Remark Though no general guidelines of using these 
two methods to construct the desired polynomial parity 
check matrix H(Ar) are given, examples can be obtained 



with a simple search even when the code length is very 
long. This is because if we want to construct classical 
QC-LDPC codes with long length, we will increase the 
parameter r rather than L and J. Choosing larger r 
increases the distance property of the QC-LDPC codes 
p^ . Therefore, in general, L and J are not very big, 
which makes the search not difficult to perform. 



IV. PERFORMANCE 

In this section, we compare the performance of the 
quantum LDPC codes given in Sec. IIIII to simulation 
results for two constructions currently available in the 
dual-containing quantum LDPC codes literature. The 
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criterion for comparison between these quantum LDPC 
codes is the net rate (this is equal to the definition of 
"rate" for standard QECCs). If the quantum codes are 
constructed by the CSS construction from classical QC- 
LDPC codes with same parameters J and L, the corre- 
sponding standard QECCs and EAQECCs have almost 
same rate, which equals ■ Slight differences in net 
rates are possible because of the possibility of different 
numbers of linearly dependent rows in two parity check 
matrices of classical QC-LDPC codes. 

The authors in proposed four dual-containing con- 
structions of quantum LDPC codes. Among those con- 
structions, we use one construction in particular (Ref. 
[To| called it construction "B") as a benchmark, since it 
performed the best of their constructions, especially in 
the low quantum rate (less than 0.5) and medium code 
length (less than 10000 qubits) case. Comparison of the 
performance of all these 4 constructions is illustrated in 
Fig. 17 on page 35 of [10]- The construction is as follows: 
take ann/2xn/2 cyclic matrix C with row weight L/2, 
and define 

We then delete some rows from i/o to obtain a matrix 
H with m rows. It is easy to verify that H is dual- 
containing. Therefore, by the CSS construction [H, [l^, 
we can obtain standard quantum LDPC codes of length 
n. The advantage of this construction is that the choice 
of n, m, and L is completely flexible; however, the column 
weight J is not fixed. We picked n = 128, m = 48, and 
L = 8, and called this [[128,32]] quantum LDPC code 
"Ex-MacKay." It has rate k/n = 32/128, lower than the 
net rate of Exl and Ex2. 

The second example is a standard quantum LDPC 
code that was constructed from classical QC-LDPC codes 
This construction is the first example of standard 
quantum LDPC codes with no 4-cycles. 

Theorem IV. 1 Let P be an integer which is greater 
than 2 and a an element of Ti'p :— {z : z~^exists} with 
ord{a) ^ l^pl; where ord{ij) :~ min{m > 0|cr™ ~ 1} 
and \X\ means the cardinality of a set X . If we pick any 
T £ Zp = {1, cr, (7^, • ■ • }, define 



-3+1 



^k,l 



0<l < L/2 
L/2<1 <L 

-k-i+i < / < i/2 
L/2<1 <L' 



rk+l 



and define the exponent matrix He and Hjj as 

He = [cjj]jeiJ],ieiL], Hd = [dk,i]keiK]d£lL], 

where L/2 = ord{ij) and 1 < J, K < L/2, then He and 
Hjj can be used to construct quantum QC-LDPC codes 
with girth at least 6. 



Here, we pick the set of parameters (J, L, P, a, r) to be 
(3,8,15,2,3), to get a code with similar block size and 
rate to the other examples. The exponent matrices He 
and Hd described in theorem IIV.II are 



He = 



Hr 



1 2 4 8 6 12 9 3 

8 1 2 4 12 9 3 6 
4 8 1 2 9 3 6 12 

9 3 6 12 14 13 11 7 
12 9 3 6 13 11 7 14 
6 12 9 3 11 7 14 13 



(17) 
(18) 



and by the CSS construction, it will give a [[120,38,4]] 
quantum QC-LDPC code. We will call this code "Ex- 
HI". It has rate k/n = 38/120, slightly higher (just over 
1%) than Exl and Ex2. 
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FIG. 1: (Color online) . Performance of quantum LDPC codes 
with SPA decoding, and 100-iteration 

In the simulation, the channel is assumed to be the de- 
polarizing channel, which creates X errors, Y errors, and 
Z errors with equal probability fm- Since all these quan- 
tum LDPC codes are CSS-type quantum codes, Z errors 
and X errors can be decoded and corrected separately 
by the sum-product algorithm using a standard classical 
correction algorithm [l3| ■ Because the depolarizing chan- 
nel can be thought of as producing a separate list of X 
errors and Z errors (with a Y error being both an X and 
a Z) , doing two separate "classical" correction steps gives 
an accurate simulation of quantum error correction. For 
an EAQECC we must include Bob's half of the shared 
ebits in the error correction step; these bits, not having 
passed through the channel, are of course error-free. 

We compare the performance of our examples in sec- 
tion [iTT] with these two dual-containing quantum LDPC 
codes in figure [TJ The performances of Exl and Ex2 
do not differ much. This is not surprising, since these 
two codes have similar parameters. The performance of 
Ex-MacKay is worse than Exl and Ex2, probably be- 
cause there are so many 4-cycles in Ex-MacKay. These 
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cycles impair the performance of sum-product decod- 
ing algorithm. The entanglement-assisted quantum QC- 
LDPC codes also outperform the quantum QC-LDPC 
code of Ex-HI, probably because the classical QC-LDPC 
codes used to construct our examples have better dis- 
tance properties than the classical QC-LDPC of cx-HI. 
This simulation result is also consistent with our result 
in [l^: better classical codes give better quantum codes. 

Of course, these 4 simulation results are by no means 
an exhaustive study of all possible quantum LDPC codes. 
These four examples were chosen without optimizing 
for their error-correcting performance; in general, one 
expects generically similar results for two codes pro- 
duced by the same construction, so these comparisons 
are likely to be typical. This does not, of course, ar- 
gue that there are no standard quantum LDPC codes, or 
other entanglement-assisted LDPC codes for that matter, 
with performance superior to those in this paper. How- 
ever, in general the results match our expectations: it is 
much easier to find classical codes with good performance 
(i.e., no 4-cycles and good distance properties), and from 
them construct quantum codes that use a relatively small 
amount of shared entanglement, than to satisfy the exact 
constraint of a dual-containing code; even more so than 
to simultaneously find a code that is dual-containing and 
contains no 4-cycles. 

Moreover, since these codes use the CSS construction, 
it is not surprising that the iterative decoding algorithm 
works well: we are effectively doing two successive classi- 
cal decoding steps, using classical codes that are known 
to be good, and reflecting the classical result that codes 
without 4-cycles tend to outperform codes with 4-cycles. 
Furthermore, Devetak's proof of the quantum channel 
coding theorem shows that codes with a CSS-like struc- 
ture are good enough to achieve capacity [20]]. Therefore, 
it is quite possible that CSS-type quantum LDPC codes 
are sufficient to given performance as good as is practi- 
cally possible. (Though we certainly do not rule out the 
possibility that studying general additive LDPC codes 
over GF(4) would reveal interesting properties — that is 
work for the future.) 

V. CONCLUSIONS 

There are two advantages of Type-II QC-LDPCs over 
Type-I QC-LDPCs. First, according to [1^ certain con- 
figurations of Type-II QC-LDPC codes have larger min- 
imum distance than Type-I QC-LDPC. Therefore, we 
can construct better quantum QC-LDPCs from classi- 
cal Type-II QC-LDPC codes. Second, it seems likely 
that Type-II QC-LDPCs will have more flexibility in con- 



structing quantum QC-LDPC codes with small amount 
of pre-shared entanglement, because of the ability to in- 
sert zero submatrices. However, further investigation of 
this issue is required. 

By using the entanglement-assisted error correction 
formalism, it is possible to construct EAQECCs from any 
classical linear code, not just dual-containing codes. We 
have shown how to do this for two classes of quasi-cyclic 
LDPC codes (Type-I and Type-II), and proven a number 
of theorems that make it possible to bound how much en- 
tanglement is required to send a code block for codes of 
these types. Using these results, we have been able to eas- 
ily construct examples of quantum QC-LDPC codes that 
require only a relatively small amount of initial shared 
entanglement, and that perform better (based on numer- 
ical simulations) than examples of previously constructed 
dual-containing quantum LDPC codes. Since in general 
the properties of quantum codes follows directly from the 
properties of the classical codes used to construct them, 
and the evidence of our examples suggests that the iter- 
ative decoders can also be made to work effectively on 
the quantum versions of these codes, this should make 
possible the construction of large-scale efficient quantum 
codes. These codes could be useful for quantum commu- 
nications; conceivably they could also be used as build- 
ing blocks for standard QECCs that might be of use in 
quantum computation, though that is still a subject for 
further research. 

We are especially interested in developing a new quan- 
tum decoding algorithm in the future. Though the SPA 
decoding algorithm gives a reasonable trade-off between 
complexity and performance, it may not be the best 
choice for decoding quantum errors. One reason for 
concern is that SPA ignores the purely quantum phe- 
nomenon of degeneracy in the decoding process, which 
could possibly result in introducing more errors instead 
of correcting them. Though this issue can hopefully be 
fixed by adding simple heuristic methods on SPA, degen- 
eracy has also been shown to lead to convergence prob- 
lems for some codes fT2!|, though we have not observed 
that effect on performance for the codes we present in 
this paper. If convergence problems prove to be com- 
mon, we hope these can be overcome by a true quantum 
decoding algorithm. 
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